Tonedeaf

Description

ToneDeaf is a backdoor trojan associated with state sponsored actors that targets organizations for data collection through staged command and control. It reaches victims via malicious documents, and its implant collects files and system information while blending its channels into ordinary web traffic. Detections under this name indicate targeted espionage activity rather than commodity criminal malware.

Stats

First seen

February 2023

Last seen

October 2026

Also known as

Alert name variants

References

• malpedia.caad.fkie.fraunhofer.de →